Repository navigation
Replies: 2 comments 7 replies
|
I'm so used to seeing identity providers shown as buttons that it's a bit strange to me to have "Security Key" look like one of them. In my mind things were organized like this:
What would it look like with the following scenario: We would end up with a login screen featuring:
Anyway I agree the location of the "Try another way" link doesn't feel right when Identity Providers are configured. Side note: Aren't you afraid such an implementation could break custom login forms (I guess it depends on the data model behind this implementation) ? |
|
@vanrar68 Thanks for your comment! I think you're right. It'd be kinda counterproductive regarding the usability and UX with another item |
|
A Webauthn Security Key is a replacement for username/password login. So I would also expect this option to be displayed right after the username password section. It's much better to have it available on the top level screen, because at our Keycloak installations it is usually decided at realm level which methods or IdPs should be available to the user. Each of the sections could be available or not based on the realm settings |
|
Thanks for your comments. At this moment, it'd be good to keep the approach as @vanrar68 proposed except the |
|
@vanrar68 Feel free to do it. I can review it then. |
|
Sorry @mabartos unfortunately I won't be able to push the UI update any time soon. I've rebased EDIT: I've rebased the PR against latest main branch. It includes an attempt at moving the "Try another way" link but have no idea if this is the right way to do. Let me know and I'll revert it if needed |
|
Thanks, @vanrar68! I'll take a look at it soon. |
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
I'd like to discuss some options, how to improve usability of planned Username-less authentication regarding the UI. @vanrar68 created PR(#7860) for support it; thanks for that, I really like the idea and it'd be great to have it included in Keycloak. I quickly try the solution for that and it seems everything works as expected. However, I've encountered situation, where I think the UI can be better.
I created an authentication flow with
Username Password FormandWebAuthn Passwordless Authenticatorset up asALTERNATIVE(for UsernamePwdForm I needed to include it to another flow, because it doesn't supportALTERNATIVErequirement). It means theUsername Password Formis displayed to the user and it's possible to be authenticated only by the authenticator, which supports Discoverable credential. The thing is, it'd be great to improve UX within authenticator selection.Implemented solution in the PR(#7860):
As you can see, when there are some Identity providers defined, the section with the title
Or sign in withis present and below the list of IdPs, there is another possibility(Try another way), how to sign in. It doesn't seem to me straightforward and IMHO the Username-less authentication should be on the same level like the Identity providers. And after clicking theTry another way, you're redirected to another page (which seems to me kinda unnecessary).Proposed solution:
As you can see, there's another item in the list with title
Security Key without Username. I think, it'd be a better solution for that.When there are defined more Identity providers and those items are restructured, the option for the Username-less could be the same like before. Or just edit the title to
Security Keyand keep the width same like for the IdPs?@mposolda @vanrar68 @tnorimat WDYT?
EDIT: After discussion below, I agree to keep the design the same as in @vanrar68 approach except for the 'Try another way' link, which should be above the list of Identity Providers.
All reactions